tom472 / mediabox

Container based media tools configuration
MIT License
428 stars 83 forks source link

Deluge cipher issue #128

Closed harphere closed 2 years ago

harphere commented 2 years ago

Hi again,

My initial problem with Deluge being unreachable/unavailable which I briefly mentioned in #127, led me to upgrade the service but looks like the problem (at least for me) persists. From the Deluge container log:

2022-03-01 09:38:58,415 DEBG 'start-script' stdout output:
2022-03-01 09:38:58 TCP/UDP: Preserving recently used remote address: [AF_INET]143.244.54.63:1198
2022-03-01 09:38:58,415 DEBG 'start-script' stdout output:
2022-03-01 09:38:58 UDP link local: (not bound)
2022-03-01 09:38:58 UDP link remote: [AF_INET]143.244.54.63:1198
2022-03-01 09:38:59,189 DEBG 'start-script' stdout output:
2022-03-01 09:38:59 [romania408] Peer Connection Initiated with [AF_INET]143.244.54.63:1198
2022-03-01 09:39:00,478 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 AUTH: Received control message: AUTH_FAILED
2022-03-01 09:39:00,479 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 SIGTERM[soft,auth-failure] received, process exiting
2022-03-01 09:39:00,486 DEBG 'start-script' stdout output:
[info] Starting OpenVPN (non daemonised)...
2022-03-01 09:39:00,518 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
2022-03-01 09:39:00 DEPRECATED OPTION: --cipher set to 'aes-256-gcm' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'aes-256-gcm' to --data-ciphers or change --cipher 'aes-256-gcm' to --data-ciphers-fallback 'aes-256-gcm' to silence this warning.
2022-03-01 09:39:00 WARNING: file 'credentials.conf' is group or others accessible
2022-03-01 09:39:00,519 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 OpenVPN 2.5.5 [git:makepkg/869f194c23ae93c4+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec 15 2021
2022-03-01 09:39:00 library versions: OpenSSL 1.1.1m  14 Dec 2021, LZO 2.10
2022-03-01 09:39:00,519 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2022-03-01 09:39:00,521 DEBG 'start-script' stdout output:
2022-03-01 09:39:00 CRL: loaded 1 CRLs from file -----BEGIN X509 CRL-----

Looks like a cipher issue?

tom472 commented 2 years ago

And via Portainer you are seeing that the DelugeVPN container isn't actually starting?

I see the same message in my logs too but it is a warning that there is an option being passed that is going to be depreciated soon but it does not stop my container from starting.

Can you verify that the container is not actually starting?

harphere commented 2 years ago

I feel really dumb. It was a PIA credential issue. I don't remember changing the password but I must have when the account renewed. I kept answering 'no' to the prompt in the script. Thanks for your patience with my silly mistakes.

tom472 commented 2 years ago

All good -- no worries Glad it is all working for you and happy to hear you are enjoying Mediabox.